Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[pull] master from cert-manager:master #1066

Open
wants to merge 1,889 commits into
base: master
Choose a base branch
from
Open

[pull] master from cert-manager:master #1066

wants to merge 1,889 commits into from
This pull request is big! We’re only showing the most recent 250 commits.

Commits on Jul 4, 2024

  1. add design for pushing charts to OCI registry 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Jul 4, 2024
    Configuration menu
    Copy the full SHA
    38b7021 View commit details
    Browse the repository at this point in the history

  2. tweak design to push to quay.io/jetstack/charts 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Jul 4, 2024
    Configuration menu
    Copy the full SHA
    bccdb05 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7155 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 4, 2024
    Configuration menu
    Copy the full SHA
    659f22b View commit details
    Browse the repository at this point in the history

  4. changed the scorecard badge link to the standard format 

    Signed-off-by: harshitasao <harshitasao@gmail.com>
    @harshitasao
    harshitasao committed Jul 4, 2024
    Configuration menu
    Copy the full SHA
    9cfe0bc View commit details
    Browse the repository at this point in the history

Commits on Jul 10, 2024

  1. Reduce memory usage by only caching the metadata of Secret resources 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Jul 10, 2024
    Configuration menu
    Copy the full SHA
    8f9ccf3 View commit details
    Browse the repository at this point in the history

  2. make go-tidy 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Jul 10, 2024
    Configuration menu
    Copy the full SHA
    15084fd View commit details
    Browse the repository at this point in the history

  3. Update the memory-management design document 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Jul 10, 2024
    Configuration menu
    Copy the full SHA
    961e81b View commit details
    Browse the repository at this point in the history

  4. fix GHSA-xr7q-jx4m-x55m 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Jul 10, 2024
    Configuration menu
    Copy the full SHA
    8c182d7 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7164 from SgtCoDFish/bump-grpc 

    Fix GHSA-xr7q-jx4m-x55m
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 10, 2024
    Configuration menu
    Copy the full SHA
    c96e6a6 View commit details
    Browse the repository at this point in the history

  6. Updating the badge link to the new domain 

    Signed-off-by: harshitasao <harshitasao@gmail.com>
    @harshitasao
    harshitasao committed Jul 10, 2024
    Configuration menu
    Copy the full SHA
    aaad3b9 View commit details
    Browse the repository at this point in the history

Commits on Jul 12, 2024

  1. Merge pull request #7161 from wallrj/7147-cainjector-metadata-only-cache 

    Reduce memory usage by only caching the metadata of Secret resources
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 12, 2024
    Configuration menu
    Copy the full SHA
    c746fdf View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7108 from inteon/bugfix_aws 

    BUGFIX: AWS route53: Set global region for sts
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 12, 2024
    Configuration menu
    Copy the full SHA
    4e3c162 View commit details
    Browse the repository at this point in the history

Commits on Jul 15, 2024

  1. Allow config of http01 solver pod security context 

    This allows configuration of the http01 solver PodSecurityContext as
part of the Issuer specification.

Signed-off-by: Adrian Lai <aidy@loathe.me.uk>
    @aidy
    aidy committed Jul 15, 2024
    Configuration menu
    Copy the full SHA
    3e98f55 View commit details
    Browse the repository at this point in the history

  2. Generate CRDs / conversion functions 

    Signed-off-by: Adrian Lai <aidy@loathe.me.uk>
    @aidy
    aidy committed Jul 15, 2024
    Configuration menu
    Copy the full SHA
    12e3233 View commit details
    Browse the repository at this point in the history

  3. Add test for http01 PodSecurityContext config 

    Signed-off-by: Adrian Lai <aidy@loathe.me.uk>
    @aidy
    aidy committed Jul 15, 2024
    Configuration menu
    Copy the full SHA
    96831b9 View commit details
    Browse the repository at this point in the history

  4. Fix test 

    Signed-off-by: Adrian Lai <adrian.lai@jetstack.io>
    @aidy
    aidy committed Jul 15, 2024
    Configuration menu
    Copy the full SHA
    62bdee8 View commit details
    Browse the repository at this point in the history

  5. Update/Fix tests for new test structure 

    Signed-off-by: Adrian Lai <adrian.lai@jetstack.io>
    @aidy
    aidy committed Jul 15, 2024
    Configuration menu
    Copy the full SHA
    8b68443 View commit details
    Browse the repository at this point in the history

  6. Copy PodSecurityContext over, dropping windowsOptions 

    Signed-off-by: Adrian Lai <adrian.lai@jetstack.io>
    @aidy
    aidy committed Jul 15, 2024
    Configuration menu
    Copy the full SHA
    6dc80e5 View commit details
    Browse the repository at this point in the history

  7. Remove protobuf annotations 

    These were copy-pasted in from the parent definitions. We don't marshal
to protobuf (none of the other structs have equivalent annotations), so
remove them as they are unnecessary.

Signed-off-by: Adrian Lai <adrian.lai@jetstack.io>
    @aidy
    aidy committed Jul 15, 2024
    Configuration menu
    Copy the full SHA
    bde1acd View commit details
    Browse the repository at this point in the history

  8. fix: Handle case of Azure returning auth error 

    Signed-off-by: Bartosz Slawianowski <bartosz.slawianowski@natzka.com>
    @eplightning
    eplightning committed Jul 15, 2024
    Configuration menu
    Copy the full SHA
    cb2731e View commit details
    Browse the repository at this point in the history

Commits on Jul 16, 2024

  1. test: adds test for getHTTPRouteForChallenge 

    Signed-off-by: Miguel Varela Ramos <miguel@cohere.ai>
    @miguelvr
    miguelvr committed Jul 16, 2024
    Configuration menu
    Copy the full SHA
    c989dfd View commit details
    Browse the repository at this point in the history

  2. fix: checkAndUpdateGatewayHTTPRoute function 

    Signed-off-by: Miguel Varela Ramos <miguel@cohere.ai>
    @miguelvr
    miguelvr committed Jul 16, 2024
    Configuration menu
    Copy the full SHA
    937fc85 View commit details
    Browse the repository at this point in the history

  3. test: add test for ensureGatewayHTTPRoute 

    Signed-off-by: Miguel Varela Ramos <miguel@cohere.ai>
    @miguelvr
    miguelvr committed Jul 16, 2024
    Configuration menu
    Copy the full SHA
    35e5e12 View commit details
    Browse the repository at this point in the history

  4. Add test case 

    Signed-off-by: Bartosz Slawianowski <bartosz.slawianowski@natzka.com>
    @eplightning
    eplightning committed Jul 16, 2024
    Configuration menu
    Copy the full SHA
    30d4fce View commit details
    Browse the repository at this point in the history

  5. test: add test for multiple httproute resources 

    Signed-off-by: Miguel Varela Ramos <miguel@cohere.ai>
    @miguelvr
    miguelvr committed Jul 16, 2024
    Configuration menu
    Copy the full SHA
    dc100b4 View commit details
    Browse the repository at this point in the history

Commits on Jul 17, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Jul 17, 2024
    Configuration menu
    Copy the full SHA
    9eeeabd View commit details
    Browse the repository at this point in the history

  2. add missing Make dependencies 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Jul 17, 2024
    Configuration menu
    Copy the full SHA
    d673563 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7171 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 17, 2024
    Configuration menu
    Copy the full SHA
    b77411b View commit details
    Browse the repository at this point in the history

  4. test: check for httproute clean-up 

    Signed-off-by: Miguel Varela Ramos <miguel@cohere.ai>
    @miguelvr
    miguelvr committed Jul 17, 2024
    Configuration menu
    Copy the full SHA
    7677258 View commit details
    Browse the repository at this point in the history

  5. fix: add missing hyphen to generateName 

    Signed-off-by: Miguel Varela Ramos <miguel@cohere.ai>
    @miguelvr
    miguelvr committed Jul 17, 2024
    Configuration menu
    Copy the full SHA
    8ffe264 View commit details
    Browse the repository at this point in the history

  6. fix: httproute spec deep equal 

    Signed-off-by: Miguel Varela Ramos <miguel@cohere.ai>
    @miguelvr
    miguelvr committed Jul 17, 2024
    Configuration menu
    Copy the full SHA
    8d2aac9 View commit details
    Browse the repository at this point in the history

  7. run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Jul 17, 2024
    Configuration menu
    Copy the full SHA
    d3a2ad9 View commit details
    Browse the repository at this point in the history

  8. Merge pull request #7180 from inteon/upgrade_makefiles 

    Run 'make upgrade-klone' and 'make generate'
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 17, 2024
    Configuration menu
    Copy the full SHA
    bfbe9fb View commit details
    Browse the repository at this point in the history

  9. revert: remove override for generate name 

    Signed-off-by: Miguel Varela Ramos <miguel@cohere.ai>
    @miguelvr
    miguelvr committed Jul 17, 2024
    Configuration menu
    Copy the full SHA
    f357097 View commit details
    Browse the repository at this point in the history

Commits on Jul 18, 2024

  1. fix: do not present challenge for Gateway API if feature not enabled 

    Signed-off-by: Miguel Varela Ramos <miguel@cohere.ai>
    @miguelvr
    miguelvr committed Jul 18, 2024
    Configuration menu
    Copy the full SHA
    8a8df8a View commit details
    Browse the repository at this point in the history

  2. fix: add boilerplate to test file 

    Signed-off-by: Miguel Varela Ramos <miguel@cohere.ai>
    @miguelvr
    miguelvr committed Jul 18, 2024
    Configuration menu
    Copy the full SHA
    46f3f04 View commit details
    Browse the repository at this point in the history

  3. Run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Jul 18, 2024
    Configuration menu
    Copy the full SHA
    9770794 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #7185 from cert-manager/self-upgrade-master 

    [CI] Self-upgrade merging self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 18, 2024
    Configuration menu
    Copy the full SHA
    aba3f6a View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7178 from miguelvr/miguelvr/http01-gw-solver-tests 

    fix: HTTP01 challenge HTTPRoute creation for GatewayAPI
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 18, 2024
    Configuration menu
    Copy the full SHA
    17e883c View commit details
    Browse the repository at this point in the history

  6. Merge pull request #7177 from eplightning/fix-azure-npe 

    fix: Handle case of Azure returning auth error
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 18, 2024
    Configuration menu
    Copy the full SHA
    5f003f2 View commit details
    Browse the repository at this point in the history

Commits on Jul 19, 2024

  1. Fix incorrect indentation of the PodMonitor template in the Helm chart 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Jul 19, 2024
    Configuration menu
    Copy the full SHA
    c5e95aa View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7190 from wallrj/fix-podmonitor-template-indentation 

    Fix incorrect indentation of the PodMonitor template in the Helm chart
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 19, 2024
    Configuration menu
    Copy the full SHA
    fc198e9 View commit details
    Browse the repository at this point in the history

  3. Enable metrics server on the webhook 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Jul 19, 2024
    Configuration menu
    Copy the full SHA
    e21a57a View commit details
    Browse the repository at this point in the history

Commits on Jul 23, 2024

  1. Merge pull request #7182 from wallrj/7065-webhook-metrics 

    [VC-34401] Add a metrics server to the webhook
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 23, 2024
    Configuration menu
    Copy the full SHA
    e1c1927 View commit details
    Browse the repository at this point in the history

  2. Add metrics server to the cainjector 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Jul 23, 2024
    Configuration menu
    Copy the full SHA
    4cec43b View commit details
    Browse the repository at this point in the history

  3. make generate 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Jul 23, 2024
    Configuration menu
    Copy the full SHA
    4861579 View commit details
    Browse the repository at this point in the history

  4. Add metrics configuration to the cainjector templates of the Helm chart 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Jul 23, 2024
    Configuration menu
    Copy the full SHA
    9273158 View commit details
    Browse the repository at this point in the history

  5. Fix the podAnnotations check in the metrics labels section of the web… 

    …hook deployment

Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Jul 23, 2024
    Configuration menu
    Copy the full SHA
    b6c8c34 View commit details
    Browse the repository at this point in the history

Commits on Jul 24, 2024

  1. Merge pull request #7194 from wallrj/7065-cainjector-metrics 

    [VC-34401] Add a metrics server to the cainjector
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 24, 2024
    Configuration menu
    Copy the full SHA
    f2b1af6 View commit details
    Browse the repository at this point in the history

  2. Update the Google CloudBuild job image 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Jul 24, 2024
    Configuration menu
    Copy the full SHA
    355d6af View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7199 from wallrj/update-google-cloudbuild-image 

    Update the Google CloudBuild job image
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 24, 2024
    Configuration menu
    Copy the full SHA
    3e83d22 View commit details
    Browse the repository at this point in the history

Commits on Jul 26, 2024

  1. error out ACME Challenges when encountering non-ACME errors 

    Signed-off-by: Brian Dols <brian.dols@inky.com>
    @bdols
    bdols committed Jul 26, 2024
    Configuration menu
    Copy the full SHA
    dc0295c View commit details
    Browse the repository at this point in the history

Commits on Jul 30, 2024

  1. Update pkg/issuer/venafi/client/venaficlient.go 

    Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
Signed-off-by: Peter Fiddes <hawksight@users.noreply.github.com>
    @hawksight @wallrj
    hawksight and wallrj authored Jul 30, 2024
    Configuration menu
    Copy the full SHA
    883e41b View commit details
    Browse the repository at this point in the history

  2. Update pkg/issuer/venafi/client/venaficlient.go 

    Co-authored-by: Richard Wall <wallrj@users.noreply.github.com>
Signed-off-by: Peter Fiddes <hawksight@users.noreply.github.com>
    @hawksight @wallrj
    hawksight and wallrj authored Jul 30, 2024
    Configuration menu
    Copy the full SHA
    5cabc54 View commit details
    Browse the repository at this point in the history

  3. chore: Update deps in venafclient.go to match gci formatting 

    Signed-off-by: Peter Fiddes <peter.fiddes@gmail.com>
    @hawksight
    hawksight committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    527477b View commit details
    Browse the repository at this point in the history

Commits on Jul 31, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Jul 31, 2024
    Configuration menu
    Copy the full SHA
    0a33e64 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7205 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Jul 31, 2024
    Configuration menu
    Copy the full SHA
    9e9c43f View commit details
    Browse the repository at this point in the history

  3. chore: Update deps in venafclient.go to match gci custom formatting 

    Signed-off-by: Peter Fiddes <peter.fiddes@gmail.com>
    @hawksight
    hawksight committed Jul 31, 2024
    Configuration menu
    Copy the full SHA
    134f498 View commit details
    Browse the repository at this point in the history

Commits on Aug 5, 2024

  1. Merge pull request #5373 from aidy/set-security-context 

    Allow config of http01 solver pod security context
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 5, 2024
    Configuration menu
    Copy the full SHA
    e65c363 View commit details
    Browse the repository at this point in the history

  2. feat: allow pod template to be specified when using gateway-api 

    Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
    @ThatsMrTalbot
    ThatsMrTalbot committed Aug 5, 2024
    Configuration menu
    Copy the full SHA
    107a82c View commit details
    Browse the repository at this point in the history

Commits on Aug 6, 2024

  1. Merge pull request #7211 from ThatsMrTalbot/feat/gateway-api-pod-temp… 

    …late

feat: allow pod template to be specified when using gateway-api
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 6, 2024
    Configuration menu
    Copy the full SHA
    1a68058 View commit details
    Browse the repository at this point in the history

Commits on Aug 7, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Aug 7, 2024
    Configuration menu
    Copy the full SHA
    46dd542 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7215 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 7, 2024
    Configuration menu
    Copy the full SHA
    4640f4f View commit details
    Browse the repository at this point in the history

Commits on Aug 8, 2024

  1. fix: update shasum for docker.io/ubuntu/bind9 

    Signed-off-by: Adam Talbot <adam.talbot@venafi.com>
    @ThatsMrTalbot
    ThatsMrTalbot committed Aug 8, 2024
    Configuration menu
    Copy the full SHA
    1362429 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7219 from ThatsMrTalbot/fix/bind9-shasum-update 

    fix: update shasum for docker.io/ubuntu/bind9
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 8, 2024
    Configuration menu
    Copy the full SHA
    7253d0b View commit details
    Browse the repository at this point in the history

  3. Add RBAC for the serviceaccount to create tokens 

    When creating the cert-manager serviceaccount we should include the RBAC
permissions to create serviceaccount tokens, which are required when
using the incuded serviceaccount for authenticating against AWS IRSA
when configuring Route53.

This aligns with the documentation on Route53, where these permissions
are only to be created manually when using a different serviceaccount.

Other usecases may apply as well.

Fixes #7212

Signed-off-by: Jasper Orschulko <jasper@fancydomain.eu>
    @Jasper-Ben
    Jasper-Ben committed Aug 8, 2024
    Configuration menu
    Copy the full SHA
    8dea2d0 View commit details
    Browse the repository at this point in the history

  4. add timeout for ACME WaitAuthorization 

    Signed-off-by: Brian Dols <brian.dols@inky.com>
    @bdols
    bdols committed Aug 8, 2024
    Configuration menu
    Copy the full SHA
    4176a7b View commit details
    Browse the repository at this point in the history

Commits on Aug 11, 2024

  1. fix errcheck linter by adding error checks everywhere 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 11, 2024
    Configuration menu
    Copy the full SHA
    14eb9f5 View commit details
    Browse the repository at this point in the history

  2. fix cleanup logic 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 11, 2024
    Configuration menu
    Copy the full SHA
    b0714bc View commit details
    Browse the repository at this point in the history

  3. remove combineError helper 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 11, 2024
    Configuration menu
    Copy the full SHA
    e466446 View commit details
    Browse the repository at this point in the history

  4. use utilruntime.Must to reduce amount of unnecessary if-else code whe… 

    …n registering schemes

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 11, 2024
    Configuration menu
    Copy the full SHA
    112beae View commit details
    Browse the repository at this point in the history

Commits on Aug 12, 2024

  1. add comments and make the timeout value a const 

    Signed-off-by: Brian Dols <brian.dols@inky.com>
    @bdols
    bdols committed Aug 12, 2024
    Configuration menu
    Copy the full SHA
    58fec28 View commit details
    Browse the repository at this point in the history

  2. golangci-lint --fix 

    Signed-off-by: Brian Dols <brian.dols@inky.com>
    @bdols
    bdols committed Aug 12, 2024
    Configuration menu
    Copy the full SHA
    f3b1506 View commit details
    Browse the repository at this point in the history

  3. make the policy results more consitent (sorting map keys) and clearly… 

    … seperate checking the label/annot. values vs checking the label/annot. keys

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 12, 2024
    Configuration menu
    Copy the full SHA
    2295472 View commit details
    Browse the repository at this point in the history

  4. add fuzz test for vault issuer 

    Signed-off-by: Adam Korczynski <adam@adalogics.com>
    @AdamKorcz
    AdamKorcz committed Aug 12, 2024
    Configuration menu
    Copy the full SHA
    772f333 View commit details
    Browse the repository at this point in the history

Commits on Aug 13, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Aug 13, 2024
    Configuration menu
    Copy the full SHA
    9809537 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7228 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 13, 2024
    Configuration menu
    Copy the full SHA
    7f1e02f View commit details
    Browse the repository at this point in the history

Commits on Aug 14, 2024

  1. add caRequiresRegeneration unit test and fix incorrect renewal time c… 

    …alculation

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 14, 2024
    Configuration menu
    Copy the full SHA
    65aea19 View commit details
    Browse the repository at this point in the history

  2. add test case for expired certificate 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 14, 2024
    Configuration menu
    Copy the full SHA
    8844fd3 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7230 from inteon/bugfix_dynamic_authority 

    BUGFIX: fix incorrect tls server renewal time check and add unit tests
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 14, 2024
    Configuration menu
    Copy the full SHA
    2472ccf View commit details
    Browse the repository at this point in the history

  4. remove debugging lines 

    Signed-off-by: Brian Dols <brian.dols@inky.com>
    @inteon
    inteon committed Aug 14, 2024
    Configuration menu
    Copy the full SHA
    9195a5d View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7202 from bdols/non-acme-error 

    error out ACME Challenges when encountering non-ACME errors
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 14, 2024
    Configuration menu
    Copy the full SHA
    138235c View commit details
    Browse the repository at this point in the history

  6. Merge pull request #7150 from inteon/fix_errcheck 

    Fix errcheck linter by adding error checks everywhere
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 14, 2024
    Configuration menu
    Copy the full SHA
    e3b2387 View commit details
    Browse the repository at this point in the history

  7. clarify mapsHaveMatchingValues comment 

    Co-authored-by: Ashley Davis <SgtCoDFish@users.noreply.github.com>
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon @SgtCoDFish
    inteon and SgtCoDFish authored Aug 14, 2024
    Configuration menu
    Copy the full SHA
    233cfbc View commit details
    Browse the repository at this point in the history

Commits on Aug 15, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Aug 15, 2024
    Configuration menu
    Copy the full SHA
    44f33a0 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7233 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 15, 2024
    Configuration menu
    Copy the full SHA
    b01a834 View commit details
    Browse the repository at this point in the history

Commits on Aug 16, 2024

  1. Run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>

aaaaaaaaaa
    @inteon
    inteon committed Aug 16, 2024
    Configuration menu
    Copy the full SHA
    2b736f5 View commit details
    Browse the repository at this point in the history

  2. upgrade k8s.io and c/r deps and fix breaking changes 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 16, 2024
    Configuration menu
    Copy the full SHA
    06fdf1d View commit details
    Browse the repository at this point in the history

  3. add temporary golangci-lint exceptions 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 16, 2024
    Configuration menu
    Copy the full SHA
    0c38de4 View commit details
    Browse the repository at this point in the history

  4. fix issuer not found test bug 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 16, 2024
    Configuration menu
    Copy the full SHA
    7835b03 View commit details
    Browse the repository at this point in the history

Commits on Aug 17, 2024

  1. fix changed bind sha 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 17, 2024
    Configuration menu
    Copy the full SHA
    98d8766 View commit details
    Browse the repository at this point in the history

Commits on Aug 20, 2024

  1. Merge pull request #7237 from cert-manager/self-upgrade-master 

    Run 'make upgrade-klone' and 'make generate'
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 20, 2024
    Configuration menu
    Copy the full SHA
    44d6b14 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7227 from inteon/sort_annotations_and_labels 

    Improve ordering consistency of policy chain results (issuance, ready ...)
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 20, 2024
    Configuration menu
    Copy the full SHA
    0557657 View commit details
    Browse the repository at this point in the history

  3. add unit tests for tls authority logic and improve logs 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 20, 2024
    Configuration menu
    Copy the full SHA
    45a52cc View commit details
    Browse the repository at this point in the history

  4. use new go 1.23 iterators 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 20, 2024
    Configuration menu
    Copy the full SHA
    ae491bf View commit details
    Browse the repository at this point in the history

Commits on Aug 21, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    c3621f0 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7241 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 21, 2024
    Configuration menu
    Copy the full SHA
    c7f61ed View commit details
    Browse the repository at this point in the history

  3. apply changes suggested by review 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    142a06f View commit details
    Browse the repository at this point in the history

  4. fix staticcheck: replace deprecated function calls 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    3125e66 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7213 from Jasper-Ben/add_serviceaccount_token_rbac 

    Add RBAC for the serviceaccount to create tokens
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 21, 2024
    Configuration menu
    Copy the full SHA
    d3124ac View commit details
    Browse the repository at this point in the history

  6. use types.NamespacedName in typed queue 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    6348a68 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #7242 from inteon/linter_fix 

    Fix staticcheck linter: use types.NamespacedName in workqueue
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 21, 2024
    Configuration menu
    Copy the full SHA
    01a107f View commit details
    Browse the repository at this point in the history

  8. re-enable misspell linter 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    2747726 View commit details
    Browse the repository at this point in the history

  9. re-enable usestdlibvars linter 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    5951ac4 View commit details
    Browse the repository at this point in the history

  10. fully enable staticcheck linter 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    c1f0a13 View commit details
    Browse the repository at this point in the history

Commits on Aug 23, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Aug 23, 2024
    Configuration menu
    Copy the full SHA
    be8e721 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7245 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 23, 2024
    Configuration menu
    Copy the full SHA
    fc08cbc View commit details
    Browse the repository at this point in the history

  3. upgrade all go dependencies 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 23, 2024
    Configuration menu
    Copy the full SHA
    5821ede View commit details
    Browse the repository at this point in the history

  4. In prometheus/client_golang#1424, a new check was introduced to make … 

    …sure the metric with the provided metricName is found.

We were depending on it not erroring. This PR removes that assumption and instead makes sure the metric does no longer existi using the CollectAndCount function.

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 23, 2024
    Configuration menu
    Copy the full SHA
    d140d14 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7238 from inteon/goupgrade 

    Upgrade all go dependencies
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 23, 2024
    Configuration menu
    Copy the full SHA
    e9799a8 View commit details
    Browse the repository at this point in the history

  6. Run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 23, 2024
    Configuration menu
    Copy the full SHA
    d71b087 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #7246 from cert-manager/self-upgrade-master 

    [CI] Self-upgrade merging self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 23, 2024
    Configuration menu
    Copy the full SHA
    f1a698b View commit details
    Browse the repository at this point in the history

Commits on Aug 26, 2024

  1. Merge pull request #7229 from inteon/authority_bugfix 

    Add unit tests for tls authority logic
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 26, 2024
    Configuration menu
    Copy the full SHA
    7d797a4 View commit details
    Browse the repository at this point in the history

Commits on Aug 29, 2024

  1. RFC 5280 - Section 4.2.1.3 states that 'When the keyUsage extension a… 

    …ppears in a certificate, at least one of the bits MUST be set to 1.', we must thus ommit the KeyUsages extension when it does not have any KeyUsages set

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Aug 29, 2024
    Configuration menu
    Copy the full SHA
    7e36193 View commit details
    Browse the repository at this point in the history

Commits on Aug 30, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    0449eba View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7253 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Aug 30, 2024
    Configuration menu
    Copy the full SHA
    e9b2678 View commit details
    Browse the repository at this point in the history

Commits on Sep 5, 2024

  1. change message to a generic one 

    Signed-off-by: Adam Korczynski <adam@adalogics.com>
    @AdamKorcz
    AdamKorcz committed Sep 5, 2024
    Configuration menu
    Copy the full SHA
    db04694 View commit details
    Browse the repository at this point in the history

Commits on Sep 6, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    46ea393 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7257 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 6, 2024
    Configuration menu
    Copy the full SHA
    7d75c98 View commit details
    Browse the repository at this point in the history

  3. add comment 

    Signed-off-by: Adam Korczynski <adam@adalogics.com>
    @AdamKorcz
    AdamKorcz committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    ba4ef85 View commit details
    Browse the repository at this point in the history

  4. Prevent aggressive Route53 retries caused by STS authentication failu… 

    …res by removing the Amazon Request ID from STS errors

Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 6, 2024
    Configuration menu
    Copy the full SHA
    da12061 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7259 from wallrj/5486-redact-amz-request-id 

    Prevent aggressive Route53 retries caused by STS authentication failures by removing the Amazon Request ID from STS errors
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 6, 2024
    Configuration menu
    Copy the full SHA
    0395fd6 View commit details
    Browse the repository at this point in the history

Commits on Sep 9, 2024

  1. Merge pull request #7192 from AdamKorcz/fuzz-july1 

    add fuzz test for cert requests with vault issuer
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 9, 2024
    Configuration menu
    Copy the full SHA
    7c808f8 View commit details
    Browse the repository at this point in the history

Commits on Sep 10, 2024

  1. Merge pull request #7250 from inteon/only_add_keyusages_if_non_zero 

    BUGFIX: adhere to RFC 5280 - Section 4.2.1.3 and don't include empty KeyUsages extensions
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 10, 2024
    Configuration menu
    Copy the full SHA
    05cf58f View commit details
    Browse the repository at this point in the history

Commits on Sep 11, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Sep 11, 2024
    Configuration menu
    Copy the full SHA
    10bf033 View commit details
    Browse the repository at this point in the history

  2. fix gosec G115 linter 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Sep 11, 2024
    Configuration menu
    Copy the full SHA
    4cf366f View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7265 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 11, 2024
    Configuration menu
    Copy the full SHA
    b9cc814 View commit details
    Browse the repository at this point in the history

Commits on Sep 12, 2024

  1. remove empty apiGroup from 'subjects.ServiceAccount' refs 

    Signed-off-by: Yuedong Wu <dwcn22@outlook.com>
    @lunarwhite
    lunarwhite committed Sep 12, 2024
    Configuration menu
    Copy the full SHA
    64f8ad8 View commit details
    Browse the repository at this point in the history

  2. fix SHA for bind image which changed upstream 

    also removes some trailing whitespace

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Sep 12, 2024
    Configuration menu
    Copy the full SHA
    609fd0b View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7271 from SgtCoDFish/bindsha 

    fix SHA for bind image which changed upstream
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 12, 2024
    Configuration menu
    Copy the full SHA
    2b73ff6 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #7270 from lunarwhite/rm-empty 

    Helm: Remove empty apiGroup from 'subjects.ServiceAccount' refs
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 12, 2024
    Configuration menu
    Copy the full SHA
    3cc9320 View commit details
    Browse the repository at this point in the history

Commits on Sep 17, 2024

  1. add fuzzer for venafi cr controller 

    Signed-off-by: Adam Korczynski <adam@adalogics.com>
    @AdamKorcz
    AdamKorcz committed Sep 17, 2024
    Configuration menu
    Copy the full SHA
    77b3df7 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7159 from harshitasao/scorecard-badge-link 

    changed the scorecard badge link to the standard format
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 17, 2024
    Configuration menu
    Copy the full SHA
    2202275 View commit details
    Browse the repository at this point in the history

Commits on Sep 18, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    6cba631 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7281 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 18, 2024
    Configuration menu
    Copy the full SHA
    1e332e2 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7279 from AdamKorcz/venafi-fuzzer 

    add fuzzer for venafi cr controller
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 18, 2024
    Configuration menu
    Copy the full SHA
    6d2f5e1 View commit details
    Browse the repository at this point in the history

  4. add further text explaining why we use an old license year 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    11a013b View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7283 from SgtCoDFish/license-year 

    Add further text explaining why we use an old license year
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 18, 2024
    Configuration menu
    Copy the full SHA
    e1fb0c4 View commit details
    Browse the repository at this point in the history

  6. Clarify how to use the Kind section of the PR template 

    Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
    @jsoref
    jsoref committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    26f3314 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #7280 from jsoref/improve-kind-discoverability 

    Clarify how to use the Kind section of the PR template
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 18, 2024
    Configuration menu
    Copy the full SHA
    c69e9ba View commit details
    Browse the repository at this point in the history

  8. Fix config api defaults updated messages 

    Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
    @jsoref
    jsoref committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    de85bd7 View commit details
    Browse the repository at this point in the history

  9. spelling: feature 

    Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
    @jsoref
    jsoref committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    6564f1c View commit details
    Browse the repository at this point in the history

  10. add missing issuer hint 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    d52fd2f View commit details
    Browse the repository at this point in the history

  11. Merge pull request #7084 from hawksight/user-pass-oauth 

    feat: Use OAuth endpoint for Venafi Issuer when user/pass provided
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 18, 2024
    Configuration menu
    Copy the full SHA
    c992382 View commit details
    Browse the repository at this point in the history

  12. Add support for domain qualified finalizer 

    K8s expects finalizers to be of the form:
FQDN/finalizer-name

As such, the initial finalizer name (finalizer.acme.cert-manager.io)
used by cert-manager is noncompliant.

These changes add initial support for a proper domain qualified name
(acme.cert-manager.io/finalizer).

Support for using that new name will be added later.

Feature plan:

1. Add support for tolerating the domain-qualified-finalizer
2. Add flag enabled support for setting the domain-qualified-finalizer
3. Release a version with current finalizer on by default
4. Change default behavior to use the domain-qualified-finalizer
   and allowing flag to use legacy behavior
5. Release a version with domain-qualified-finalizer on by default
6. Remove support for the legacy finalizer and the flag
7. Release a version with only domain-qualified-finalizer

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
    @jsoref
    jsoref committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    0afe4ab View commit details
    Browse the repository at this point in the history

  13. Add feature gate for domain qualified finalizer 

    Ideally this allows users to use acme.cert-manager.io/finalizer

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
    @jsoref
    jsoref committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    4d97c4c View commit details
    Browse the repository at this point in the history

  14. Merge pull request #7104 from Guitarkalle/6898-add-validity-duration-… 

    …to-venafi-certs

6898: Add validity duration to Venafi certificates
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 18, 2024
    Configuration menu
    Copy the full SHA
    b127b55 View commit details
    Browse the repository at this point in the history

  15. Merge pull request #7273 from jsoref/issue-7266 

    Support a domain qualified finalizer instead of one that triggers a warning from kubernetes
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 18, 2024
    Configuration menu
    Copy the full SHA
    bbb21d5 View commit details
    Browse the repository at this point in the history

  16. Merge pull request #7132 from SgtCoDFish/chartmigration 

    Add design for pushing charts to OCI registry
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 18, 2024
    Configuration menu
    Copy the full SHA
    a7bff69 View commit details
    Browse the repository at this point in the history

  17. remove issuer argument from CleanUp function, since it might no longe… 

    …r exist at the moment of deletion

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    40fd166 View commit details
    Browse the repository at this point in the history

  18. add missing data to fake Challenges in tests 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Sep 18, 2024
    Configuration menu
    Copy the full SHA
    e184d1b View commit details
    Browse the repository at this point in the history

Commits on Sep 19, 2024

  1. simplify helper functions and add comments 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    f62e5e1 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7285 from inteon/remove_cleanup_argument 

    Remove issuer argument from CleanUp function
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 19, 2024
    Configuration menu
    Copy the full SHA
    ced378b View commit details
    Browse the repository at this point in the history

  3. Test that Route53 region is optional 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    d369f92 View commit details
    Browse the repository at this point in the history

  4. Allow the Route53 region to be optional 

    Remove webhook validation for Route53 region

Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    78a8391 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7243 from inteon/linter_fix2 

    Enable and fix usestdlibvars, misspell and staticcheck linters
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 19, 2024
    Configuration menu
    Copy the full SHA
    060354a View commit details
    Browse the repository at this point in the history

  6. Test that Route53 region is optional with OpenAPI validation too 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    f6e028b View commit details
    Browse the repository at this point in the history

  7. Make Route53 region optional (in openapi) 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    15cd934 View commit details
    Browse the repository at this point in the history

  8. Fix typos 

    Signed-off-by: Nathan Baulch <nathan.baulch@gmail.com>
    @NathanBaulch
    NathanBaulch committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    a39748a View commit details
    Browse the repository at this point in the history

Commits on Sep 20, 2024

  1. run 'make generate' 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Sep 20, 2024
    Configuration menu
    Copy the full SHA
    c274d1d View commit details
    Browse the repository at this point in the history

  2. Update the Route53 region API documentation 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 20, 2024
    Configuration menu
    Copy the full SHA
    9de6aa6 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7290 from NathanBaulch/typos 

    Fix typos
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 20, 2024
    Configuration menu
    Copy the full SHA
    510b092 View commit details
    Browse the repository at this point in the history

  4. remove old API versions 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Sep 20, 2024
    Configuration menu
    Copy the full SHA
    f17b436 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7278 from inteon/remove_deprecated_api_versions 

    Remove old API versions
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 20, 2024
    Configuration menu
    Copy the full SHA
    51f8f39 View commit details
    Browse the repository at this point in the history

  6. Merge pull request #7287 from wallrj/optional-aws-route53-region 

    Optional AWS Route53 region
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 20, 2024
    Configuration menu
    Copy the full SHA
    569f920 View commit details
    Browse the repository at this point in the history

  7. Test removeReqID with %w wrapped errors 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 20, 2024
    Configuration menu
    Copy the full SHA
    deaf4d1 View commit details
    Browse the repository at this point in the history

  8. Merge pull request #7154 from jrcichra/webhook-ca-managed-by 

    Add managed-by label to webhook CA
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 20, 2024
    Configuration menu
    Copy the full SHA
    caa24fc View commit details
    Browse the repository at this point in the history

  9. Redact the RequestID in %w wrapped errors 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 20, 2024
    Configuration menu
    Copy the full SHA
    422cc51 View commit details
    Browse the repository at this point in the history

  10. Handle nil errors 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 20, 2024
    Configuration menu
    Copy the full SHA
    13f9c94 View commit details
    Browse the repository at this point in the history

  11. Merge pull request #7291 from wallrj/route53-error-redact 

    Prevent aggressive Route53 retries caused by IRSA authentication failures by removing the Amazon Request ID from errors wrapped by the default credential cache
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 20, 2024
    Configuration menu
    Copy the full SHA
    900241b View commit details
    Browse the repository at this point in the history

  12. Log AWS SDK warnings and API requests at cert-manager debug level 

    Allows you to see which API endpoints are being used and which region is being
used in the request signature.
To help debug AWS Route53 problems in the field.

Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 20, 2024
    Configuration menu
    Copy the full SHA
    ce6153c View commit details
    Browse the repository at this point in the history

  13. Merge pull request #7292 from wallrj/route53-debug-request-logging 

    Log AWS SDK warnings and API requests at cert-manager debug level
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 20, 2024
    Configuration menu
    Copy the full SHA
    63b158c View commit details
    Browse the repository at this point in the history

Commits on Sep 21, 2024

  1. Append cert-manager user-agent string to all AWS API requests 

    Including IMDS and STS requests.

Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 21, 2024
    Configuration menu
    Copy the full SHA
    5111a19 View commit details
    Browse the repository at this point in the history

  2. Use context logger for Route53 operations 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 21, 2024
    Configuration menu
    Copy the full SHA
    3707ce2 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7295 from wallrj/route53-user-agent-for-all-requests 

    Append cert-manager user-agent string to all AWS API requests
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 21, 2024
    Configuration menu
    Copy the full SHA
    193f318 View commit details
    Browse the repository at this point in the history

  4. go-mod-upgrade 

    Upgraded Go dependencies using https://github.com/oligot/go-mod-upgrade

 go-mod-upgrade
 make go-tidy
 make generate

Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 21, 2024
    Configuration menu
    Copy the full SHA
    9c5b699 View commit details
    Browse the repository at this point in the history

Commits on Sep 22, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Sep 22, 2024
    Configuration menu
    Copy the full SHA
    b91c777 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7298 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 22, 2024
    Configuration menu
    Copy the full SHA
    b76e982 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7296 from wallrj/route53-contextual-logging 

    Use context logger for Route53 operations
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 22, 2024
    Configuration menu
    Copy the full SHA
    a0b29a2 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #7297 from wallrj/go-mod-upgrade 

    go-mod-upgrade
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 22, 2024
    Configuration menu
    Copy the full SHA
    8276d84 View commit details
    Browse the repository at this point in the history

Commits on Sep 24, 2024

  1. Enable the WatchList (Streaming Lists) feature 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @inteon @wallrj
    inteon authored and wallrj committed Sep 24, 2024
    Configuration menu
    Copy the full SHA
    9ed80cf View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7175 from wallrj/3748-enable-watchlist-streaming-… 

    …lists

Reduce load on the Kubernetes API server and reduce the peak memory use of the cert-manager components by enabling the use of the WatchList (Streaming Lists) feature
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 24, 2024
    Configuration menu
    Copy the full SHA
    81bd1c5 View commit details
    Browse the repository at this point in the history

Commits on Sep 25, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    5747ea2 View commit details
    Browse the repository at this point in the history

  2. fix copyloopvar linter, removing copies that are no longer necessary 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    8d7c8f0 View commit details
    Browse the repository at this point in the history

  3. fix bind image for arm64 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    3651ab7 View commit details
    Browse the repository at this point in the history

  4. add support for testing k8s 1.31 with kind 0.24.0 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    d6097ee View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7300 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 25, 2024
    Configuration menu
    Copy the full SHA
    8d61c8e View commit details
    Browse the repository at this point in the history

  6. Merge pull request #7302 from SgtCoDFish/k8s-1.31 

    Add support for Kubernetes 1.31 in kind v0.24
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 25, 2024
    Configuration menu
    Copy the full SHA
    9fa1112 View commit details
    Browse the repository at this point in the history

  7. Always fall back on the ambient region 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    7c5df3a View commit details
    Browse the repository at this point in the history

  8. Use regional STS endpoints for the dedicated STS client, when a Role … 

    …or WebIdentityToken are supplied in the Issuer

Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    8fcd13b View commit details
    Browse the repository at this point in the history

Commits on Sep 26, 2024

  1. Merge pull request #7299 from wallrj/route53-ambient-region 

    Route53 DNS01 Solver: Always fall back on the ambient region
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 26, 2024
    Configuration menu
    Copy the full SHA
    f3b2a98 View commit details
    Browse the repository at this point in the history

  2. Fix possible OOM failures in the makestage Google Cloud Build 

    By reducing the make parallelism.

Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 26, 2024
    Configuration menu
    Copy the full SHA
    59c558b View commit details
    Browse the repository at this point in the history

  3. Use a better supported machine type 

    N1_HIGHCPU_32 is no longer listed in the table of supported GCB machine types,
but there is the following foot note in the documentation:
> Cloud Build continues to offer n1-highcpu-8 and n1-highcpu-32 machine types. They are offered at the same price as e2-highcpu-8 and e2-highcpu-32

https://cloud.google.com/build/pricing

Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Sep 26, 2024
    Configuration menu
    Copy the full SHA
    25c7ffa View commit details
    Browse the repository at this point in the history

  4. Merge pull request #7308 from wallrj/fix-makestage-oom-failures 

    Fix makestage OOM failures
    @cert-manager-prow
    cert-manager-prow[bot] authored Sep 26, 2024
    Configuration menu
    Copy the full SHA
    f2c262c View commit details
    Browse the repository at this point in the history

Commits on Oct 1, 2024

  1. Revert "Reduce load on the Kubernetes API server and reduce the peak … 

    …memory use of the cert-manager components by enabling the use of the WatchList (Streaming Lists) feature"

Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    99498f3 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7315 from wallrj/revert-7175-3748-enable-watchlis… 

    …t-streaming-lists

Revert "Reduce load on the Kubernetes API server and reduce the peak memory use of the cert-manager components by enabling the use of the WatchList (Streaming Lists) feature"
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 1, 2024
    Configuration menu
    Copy the full SHA
    b56ac27 View commit details
    Browse the repository at this point in the history

  3. Add extraEnv to webhook, cainjector, and startupapicheck 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    28f2fa5 View commit details
    Browse the repository at this point in the history

  4. make generate-helm-schema generate-helm-docs 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    617f29b View commit details
    Browse the repository at this point in the history

  5. Update deployments and startupapi Job 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Oct 1, 2024
    Configuration menu
    Copy the full SHA
    2543831 View commit details
    Browse the repository at this point in the history

  6. Merge pull request #7317 from wallrj/7316-extraenv-cainjector-webhook 

    Allow extra environment variables to be added to  cainjector, webhook and startupapicheck
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 1, 2024
    Configuration menu
    Copy the full SHA
    0780948 View commit details
    Browse the repository at this point in the history

Commits on Oct 2, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Oct 2, 2024
    Configuration menu
    Copy the full SHA
    788501d View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7321 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 2, 2024
    Configuration menu
    Copy the full SHA
    ee36b5d View commit details
    Browse the repository at this point in the history

  3. make update-base-images 

    Signed-off-by: Richard Wall <richard.wall@venafi.com>
    @wallrj
    wallrj committed Oct 2, 2024
    Configuration menu
    Copy the full SHA
    5210d2a View commit details
    Browse the repository at this point in the history

  4. Merge pull request #7323 from wallrj/bump-base-images 

    make update-base-images
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 2, 2024
    Configuration menu
    Copy the full SHA
    4830066 View commit details
    Browse the repository at this point in the history

Commits on Oct 5, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Oct 5, 2024
    Configuration menu
    Copy the full SHA
    2eb8877 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7336 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 5, 2024
    Configuration menu
    Copy the full SHA
    6f7989d View commit details
    Browse the repository at this point in the history

Commits on Oct 7, 2024

  1. BUGFIX: use correct resource namespace for Cluster Issuers 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    7d1481d View commit details
    Browse the repository at this point in the history

  2. add ACME ClusterIssuer resource namespace test 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    956e53b View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7339 from inteon/bugfix_cluster_issuer_secrets 

    BUGFIX: use correct resource namespace for Cluster Issuers
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 7, 2024
    Configuration menu
    Copy the full SHA
    e2c59bf View commit details
    Browse the repository at this point in the history

  4. update schema validation for minAvailable and maxAvailable to accept … 

    …both string and integer values

Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    366b7af View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7343 from inteon/allow_string_or_int 

    BUGFIX: Update schema validation to accept both string and integer values
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 7, 2024
    Configuration menu
    Copy the full SHA
    59b6429 View commit details
    Browse the repository at this point in the history

  6. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Oct 7, 2024
    Configuration menu
    Copy the full SHA
    96411a9 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #7346 from cert-manager/self-upgrade-master 

    [CI] Self-upgrade merging self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 7, 2024
    Configuration menu
    Copy the full SHA
    4c353f1 View commit details
    Browse the repository at this point in the history

Commits on Oct 8, 2024

  1. Helm: add enabled to json schema 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Oct 8, 2024
    Configuration menu
    Copy the full SHA
    bd1d076 View commit details
    Browse the repository at this point in the history

  2. Helm chart: fix documentation for service accounts annotations 

    Signed-off-by: jordanp <jordan@rezel.net>
    @JordanP
    JordanP committed Oct 8, 2024
    Configuration menu
    Copy the full SHA
    871a189 View commit details
    Browse the repository at this point in the history

Commits on Oct 9, 2024

  1. Merge pull request #7351 from JordanP/helm-chart-values-documentation 

    Helm chart: fix documentation for service accounts annotations
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 9, 2024
    Configuration menu
    Copy the full SHA
    fee64aa View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7350 from inteon/add_enabled 

    Helm: add enabled to json schema
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 9, 2024
    Configuration menu
    Copy the full SHA
    680e856 View commit details
    Browse the repository at this point in the history

  3. Chart docs: Add enableGatewayAPI upd feat gates 

    This commit adds the `enableGatewayAPI` parameter to the chart config example.
It also updates the feature gate list with their default values.

Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>
    @puerco
    puerco committed Oct 9, 2024
    Configuration menu
    Copy the full SHA
    ed11841 View commit details
    Browse the repository at this point in the history

  4. make vendor-go generate-helm-schema 

    Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>
    @puerco
    puerco committed Oct 9, 2024
    Configuration menu
    Copy the full SHA
    b89a0e5 View commit details
    Browse the repository at this point in the history

Commits on Oct 10, 2024

  1. Merge pull request #7354 from puerco/chart-gatewaty-api 

    Chart docs: Add enableGatewayAPI feature gates
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 10, 2024
    Configuration menu
    Copy the full SHA
    5e2b1c1 View commit details
    Browse the repository at this point in the history

Commits on Oct 11, 2024

  1. Merge pull request #7240 from inteon/use_go_1.23_iterators 

    Use new go 1.23 iterators
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 11, 2024
    Configuration menu
    Copy the full SHA
    129ce79 View commit details
    Browse the repository at this point in the history

  2. fix: don't create certificaterequests while being deleted 

    Signed-off-by: Adam Talbot <adamtalbot93@googlemail.com>
    @ThatsMrTalbot
    ThatsMrTalbot committed Oct 11, 2024
    Configuration menu
    Copy the full SHA
    49482f9 View commit details
    Browse the repository at this point in the history

  3. chore: e2e tests to ensure certificaterequests and secrets are not cr… 

    …eated when a certificate is deleted

Signed-off-by: Adam Talbot <adamtalbot93@googlemail.com>
    @ThatsMrTalbot
    ThatsMrTalbot committed Oct 11, 2024
    Configuration menu
    Copy the full SHA
    cb4b53b View commit details
    Browse the repository at this point in the history

Commits on Oct 14, 2024

  1. Merge pull request #7361 from ThatsMrTalbot/fix/dont-create-certifica… 

    …te-requests-while-being-deleted

fix: don't create certificaterequests while being deleted
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 14, 2024
    Configuration menu
    Copy the full SHA
    71f43d5 View commit details
    Browse the repository at this point in the history

  2. remove unused pod helper functions 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Oct 14, 2024
    Configuration menu
    Copy the full SHA
    589dca7 View commit details
    Browse the repository at this point in the history

  3. fix log interface signature mismatch 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Oct 14, 2024
    Configuration menu
    Copy the full SHA
    b7de552 View commit details
    Browse the repository at this point in the history

  4. remove unused function 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Oct 14, 2024
    Configuration menu
    Copy the full SHA
    d379954 View commit details
    Browse the repository at this point in the history

Commits on Oct 15, 2024

  1. Run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
    @inteon
    inteon committed Oct 15, 2024
    Configuration menu
    Copy the full SHA
    5e61f4a View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7366 from cert-manager/self-upgrade-master 

    [CI] Self-upgrade merging self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 15, 2024
    Configuration menu
    Copy the full SHA
    ab6d8fb View commit details
    Browse the repository at this point in the history

  3. add IPv6 example for recursive DNS arg 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Oct 15, 2024
    Configuration menu
    Copy the full SHA
    1a0f0f9 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #7367 from SgtCoDFish/ipv6-recursive-dns 

    add IPv6 example for recursive DNS arg
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 15, 2024
    Configuration menu
    Copy the full SHA
    1be0dfc View commit details
    Browse the repository at this point in the history

Commits on Oct 16, 2024

  1. Use different hash algorithms for larger RSA keys 

    See also #7357

A US DoD document [1] states that:

> Effective immediately, all Public Key enabled commercial-off-the-shelf
> software and Public Key enabled Open-Source software integrations [...]
> must support at least RSA-3072 (4096 is preferred) and SHA-384.

cert-manager already supports large RSA keys - that's no problem. But we
always use SHA256 with all RSA keys currently; this commit changes that
so we use SHA512 for RSA keys 4096 bits and above, or else SHA384 for
RSA keys 3072 bits and above, or else SHA256.

We discussed in standups / in the issue how to roll this out, and the
consensus so far has been to roll this out unilaterally. Albeit we don't
have data to support our assumption, we believe there won't be
any huge compatibility problems from using this approach.

One potential issue is that SHA512 can take (much) longer on some low
powered 32-bit platforms (think older Raspberry Pis). We decided that
the risk of slowdown there isn't worth delaying the rollout of this.
Plus, people using those devices always have the option of using
RSA-2048 or else ECDSA / Ed25519.

[1]: https://dl.dod.cyber.mil/wp-content/uploads/pki-pke/pdf/unclass-memo_dodcryptoalgorithms.pdf

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Oct 16, 2024
    Configuration menu
    Copy the full SHA
    6e92072 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7368 from SgtCoDFish/ca-issuer-sig-algo 

    Use different hash algorithms for larger RSA keys
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 16, 2024
    Configuration menu
    Copy the full SHA
    59abb31 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #7363 from inteon/remove_unused_functions 

    Remove unused test functions
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 16, 2024
    Configuration menu
    Copy the full SHA
    e1a1ea9 View commit details
    Browse the repository at this point in the history

Commits on Oct 21, 2024

  1. remove use of magic numbers when validating RSA key sizes 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Oct 21, 2024
    Configuration menu
    Copy the full SHA
    f4f3ce4 View commit details
    Browse the repository at this point in the history

  2. panic on errors in vault setup, use pki pkg where available 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Oct 21, 2024
    Configuration menu
    Copy the full SHA
    bcd2756 View commit details
    Browse the repository at this point in the history

  3. switch to math/rand/v2 for jitter 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Oct 21, 2024
    Configuration menu
    Copy the full SHA
    bf35e91 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #7381 from SgtCoDFish/randtweaks 

    Cleanup key gen / RSA key sizes
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 21, 2024
    Configuration menu
    Copy the full SHA
    0a8268e View commit details
    Browse the repository at this point in the history

Commits on Oct 25, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Oct 25, 2024
    Configuration menu
    Copy the full SHA
    7a5d75a View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7387 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 25, 2024
    Configuration menu
    Copy the full SHA
    e8ce708 View commit details
    Browse the repository at this point in the history

  3. add tenantID option to azureDNS managedIdentity 

    Signed-off-by: Jochen Richter <jochenrichter84@gmail.com>
    @jochenrichter @SgtCoDFish
    jochenrichter authored and SgtCoDFish committed Oct 25, 2024
    Configuration menu
    Copy the full SHA
    c951974 View commit details
    Browse the repository at this point in the history

  4. update conversion functions 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Oct 25, 2024
    Configuration menu
    Copy the full SHA
    15cc475 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #7376 from jochenrichter/managed_identity_tenant_id 

    add tenantID option to azureDNS managedIdentity
    @cert-manager-prow
    cert-manager-prow[bot] authored Oct 25, 2024
    Configuration menu
    Copy the full SHA
    ec1f6e1 View commit details
    Browse the repository at this point in the history

Commits on Nov 1, 2024

  1. Do not propagate applyset labels 

    Resources with applyset labels will be pruned, which is problematic.

Instead of a generic annotation to control label propagation, the
applyset labels are always excluded. This should be a good middleground
whilst an API for doing this in a more generic way is discussed. The
label should not ever be propagated, and so is a safe default.

Fixes: #7306

Signed-off-by: Thomas Way <thomas@6f.io>
    @uhthomas
    uhthomas committed Nov 1, 2024
    Configuration menu
    Copy the full SHA
    4de5570 View commit details
    Browse the repository at this point in the history

Commits on Nov 5, 2024

  1. Merge pull request #7394 from uhthomas/7306 

    Do not propagate applyset labels
    @cert-manager-prow
    cert-manager-prow[bot] authored Nov 5, 2024
    Configuration menu
    Copy the full SHA
    1c2ee41 View commit details
    Browse the repository at this point in the history

  2. security: Add functions to limit max PEM sizes allowable 

    Includes a lot of comments explaining how the maxima were calculated.
This is _very_ conservative, and assumes we're dealing with RSA keys
twice the size of what we actually allow as a maximum.

From running the included benchmark it seems the pathological runtime is
about 13617196ns (13ms) on an M2 Max which seems acceptable.

Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Nov 5, 2024
    Configuration menu
    Copy the full SHA
    3a4c9eb View commit details
    Browse the repository at this point in the history

  3. security: remove calls to pem.Decode in non-test code 

    Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
    @SgtCoDFish
    SgtCoDFish committed Nov 5, 2024
    Configuration menu
    Copy the full SHA
    f22f78c View commit details
    Browse the repository at this point in the history

Commits on Nov 6, 2024

  1. Merge pull request #7400 from SgtCoDFish/pem-inputs 

    Restrict max size of PEM inputs
    @cert-manager-prow
    cert-manager-prow[bot] authored Nov 6, 2024
    Configuration menu
    Copy the full SHA
    e5d62ad View commit details
    Browse the repository at this point in the history

Commits on Nov 8, 2024

  1. BOT: run 'make upgrade-klone' and 'make generate' 

    Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
    @cert-manager-bot
    cert-manager-bot committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    25911fa View commit details
    Browse the repository at this point in the history

  2. Merge pull request #7410 from cert-manager/self-upgrade-master 

    [CI] Merge self-upgrade-master into master
    @cert-manager-prow
    cert-manager-prow[bot] authored Nov 8, 2024
    Configuration menu
    Copy the full SHA
    63f83c9 View commit details
    Browse the repository at this point in the history